Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/ZcjJL255SXOrS174FH5TSRCZJ6k.roa
File: ZcjJL255SXOrS174FH5TSRCZJ6k.roa (raw, json)
Hash identifier: cw7d/tSmv1cZ+fTagVIsxx6aLbIBtu/jfm1UD74y+nM=
Subject key identifier: 65:C8:C9:2F:6E:79:49:73:AB:4B:5E:F8:14:7E:53:49:10:99:27:A9
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01906D784BB3D2EFF82D651237FCB0790249
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/ZcjJL255SXOrS174FH5TSRCZJ6k.roa
Signing time: Mon 01 Jul 2024 08:45:18 +0000
ROA not before: Mon 01 Jul 2024 08:45:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35467
IP address blocks: 31.186.160.0/21 maxlen: 22
37.0.16.0/21 maxlen: 22
81.92.176.0/20 maxlen: 21
83.136.192.0/21 maxlen: 24
91.106.224.0/21 maxlen: 23
93.95.144.0/21 maxlen: 22
145.87.224.0/19 maxlen: 20
185.35.32.0/22 maxlen: 23
185.55.108.0/22 maxlen: 23
185.250.160.0/22 maxlen: 24
212.52.224.0/19 maxlen: 22
217.27.224.0/20 maxlen: 24
217.27.224.0/21 maxlen: 22
217.27.232.0/21 maxlen: 24
2a02:5b0::/32 maxlen: 48
2a02:5b0::/40 maxlen: 40
2a02:5b0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:78:4b:b3:d2:ef:f8:2d:65:12:37:fc:b0:79:02:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jul 1 08:45:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c8c92f6e794973ab4b5ef8147e5349109927a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:d8:70:8c:8b:42:52:a1:2d:3e:5e:28:70:
0f:88:cc:ef:05:11:70:15:5f:54:f7:6c:56:d5:35:
6d:11:61:42:2d:0d:08:a3:61:d7:a9:ea:91:03:96:
0f:9e:f1:a5:be:4a:fd:b7:c3:58:70:88:f8:0d:3e:
15:1a:94:b8:ef:28:4e:43:ef:aa:ac:b9:34:fa:81:
4d:f9:f0:7b:10:65:0d:ed:61:0d:31:5d:d2:39:df:
8a:b3:bd:18:da:03:49:6a:ad:25:87:48:9a:f6:81:
29:bd:38:ac:da:c7:f6:ea:bd:83:c7:eb:5d:47:46:
22:28:51:ad:ce:80:bd:8f:df:a5:13:a9:63:f0:14:
85:e4:5d:51:ce:6d:d4:a1:72:1c:f3:de:bb:c1:f5:
9c:c8:d8:47:69:29:ae:93:f7:b6:94:e5:36:da:e1:
40:e7:22:bb:16:9d:66:9e:9d:6d:92:76:c9:36:91:
27:de:97:5e:17:78:5f:ed:2a:90:fa:01:f2:fb:d7:
62:d2:f3:68:75:06:88:c1:6b:23:74:43:75:4c:5a:
af:40:ba:64:f8:aa:6f:0a:51:e9:5c:01:e1:f7:bf:
63:17:f5:57:08:48:62:c2:6e:dd:76:9d:d6:2a:f3:
c4:48:db:9f:6f:92:a9:65:13:09:8a:0f:f4:cd:e2:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:C9:2F:6E:79:49:73:AB:4B:5E:F8:14:7E:53:49:10:99:27:A9
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/ZcjJL255SXOrS174FH5TSRCZJ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.160.0/21
37.0.16.0/21
81.92.176.0/20
83.136.192.0/21
91.106.224.0/21
93.95.144.0/21
145.87.224.0/19
185.35.32.0/22
185.55.108.0/22
185.250.160.0/22
212.52.224.0/19
217.27.224.0/20
IPv6:
2a02:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:61:98:b8:a5:06:ae:ee:c1:fb:73:2c:35:0b:91:65:38:9b:
58:c6:8f:f2:7d:a5:b5:6e:92:cf:79:e2:a2:b2:d7:49:96:36:
8d:85:1d:5c:cd:17:22:43:bc:9f:e2:dd:8b:e3:1d:48:bf:f4:
10:f2:3c:b9:50:8e:9e:ce:34:48:6f:38:7c:eb:36:8b:52:0f:
79:7e:95:f1:3b:ea:11:aa:d7:94:60:27:c0:55:c1:73:04:19:
23:b2:18:2c:53:08:b2:01:84:8d:a2:a5:60:b7:40:e6:26:a2:
23:35:12:7e:27:69:75:53:9c:dd:8b:e5:81:af:c8:26:ba:73:
1e:ff:a9:f9:e1:36:a8:21:a0:b2:3e:e8:62:82:90:23:3b:60:
31:11:bb:35:d7:85:ef:19:59:ab:57:b4:96:22:40:27:df:4f:
e6:aa:f7:51:72:a5:f7:14:80:de:15:b1:02:22:03:62:6a:cc:
0f:af:be:90:91:a0:bb:6f:52:de:f2:27:a5:5c:19:b4:21:72:
f4:18:6a:08:9a:86:a9:69:11:20:7f:9c:ca:63:7e:cc:4b:01:
33:4d:25:b7:04:59:15:f0:d1:33:84:7e:0b:ee:38:2b:9c:b5:
f2:ed:e2:4d:40:52:59:d2:f5:08:24:a6:b6:59:53:6d:24:63:
2c:d3:12:41
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZBteEuz0u/4LWUSN/yweQJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2
MTg3MjYwHhcNMjQwNzAxMDg0NTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWM4YzkyZjZlNzk0OTczYWI0YjVlZjgxNDdlNTM0OTEwOTkyN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPYcIyLQlKhLT5eKHAPiMzvBRFw
FV9U92xW1TVtEWFCLQ0Io2HXqeqRA5YPnvGlvkr9t8NYcIj4DT4VGpS47yhOQ++q
rLk0+oFN+fB7EGUN7WENMV3SOd+Ks70Y2gNJaq0lh0ia9oEpvTis2sf26r2Dx+td
R0YiKFGtzoC9j9+lE6lj8BSF5F1Rzm3UoXIc8967wfWcyNhHaSmuk/e2lOU22uFA
5yK7Fp1mnp1tknbJNpEn3pdeF3hf7SqQ+gHy+9di0vNodQaIwWsjdEN1TFqvQLpk
+KpvClHpXAHh979jF/VXCEhiwm7ddp3WKvPESNufb5KpZRMJig/0zeJlcQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFGXIyS9ueUlzq0te+BR+U0kQmSepMB8GA1UdIwQY
MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt
MGQyMjIzMmMzNGEwLzEvWmNqSkwyNTVTWE9yUzE3NEZINVRTUkNaSjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw
LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDH7qgAwQD
JQAQAwQEUVywAwQDU4jAAwQDW2rgAwQDXV+QAwQFkVfgAwQCuSMgAwQCuTdsAwQC
ufqgAwQF1DTgAwQE2RvgMA0EAgACMAcDBQAqAgWwMA0GCSqGSIb3DQEBCwUAA4IB
AQBNYZi4pQau7sH7cyw1C5FlOJtYxo/yfaW1bpLPeeKistdJljaNhR1czRciQ7yf
4t2L4x1Iv/QQ8jy5UI6ezjRIbzh86zaLUg95fpXxO+oRqteUYCfAVcFzBBkjshgs
UwiyAYSNoqVgt0DmJqIjNRJ+J2l1U5zdi+WBr8gmunMe/6n54TaoIaCyPuhigpAj
O2AxEbs114XvGVmrV7SWIkAn30/mqvdRcqX3FIDeFbECIgNiaswPr76QkaC7b1Le
8ielXBm0IXL0GGoImoapaREgf5zKY37MSwEzTSW3BFkV8NEzhH4L7jgrnLXy7eJN
QFJZ0vUIJKa2WVNtJGMs0xJB
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:19 2024 by rpki-client on console-ams.rpki-client.org